Open-source components
Where the notices of the open-source components are, and how to get the source code the written offer covers.
Harthelm is proprietary software. It includes open-source components, each under its own licence, and every part of a release says which ones it contains. Nothing in Harthelm's licence terms restricts the rights those licences give you.
The notices
| Where | What |
|---|---|
| Console | Open-source notices in the account menu: one section each for the server, the console, the workspace agent and hart. |
| Server | The same texts as plain text at https://<console>/legal/notices/<part>.txt, where <part> is harthelm, console, harthelm-agent or hart. They need no sign-in. |
Chart and hart archives | LICENSE, THIRD_PARTY_NOTICES and SOURCE-OFFER.txt. |
| Images | /licenses/README.md says where the licences of an image's components are; /licenses/SOURCE-OFFER.txt is the written offer (in the server image /var/run/ko/licenses/SOURCE-OFFER.txt). |
The source code
The images contain components under licences that require their source code to be available: GPL, LGPL and MPL code in the Ubuntu and Debian packages, the Nix packages of the workspace images, and a few npm packages inside the editor. For every release there is one source bundle Since 1.1.0 with the complete source of each of them, in the version the release ships, an index of what is where, and a copy of the written offer.
The bundle is published next to the release's images, in the same registry, as an OCI artifact:
crane export <your registry>/harthelm/sources:<version> - | tar -xIt unpacks to harthelm-<version>-sources/ with:
| Path | What |
|---|---|
SOURCE-OFFER.txt | The written offer. |
INDEX.txt, index.json | Each component with its version, its licence, where it is in the images and where its source came from. |
ubuntu/, debian/ | The source packages of the Ubuntu and Debian packages. |
nix/ | The sources, patches and build recipes of the Nix packages. |
npm/ | The published npm packages. |
The release's notes name the exact reference and digest in harthelm-<version>-sources.txt. Which release an image
belongs to is in /etc/harthelm/version inside the image.
For an air-gapped installation, copy the artifact into your mirror like an image
if you want it inside, for example with crane copy.
The written offer
For at least three years after a release was last distributed, anyone who received it can ask for a complete copy of
its source bundle, as a download or on a physical medium, for no more than the cost of providing it. Where to write
is in SOURCE-OFFER.txt, in the chart, the hart archives and every image. Name the release and the image or
component you are asking about.